Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer (raw, json)
Hash identifier: ypCpMfMeWquo0NaV3IDlBw0oVlyvQvzqpqyLRg+OR10=
Subject key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E328D49DC11AE88E5879D315227B48BFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 12 Mar 2024 12:05:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.226.32.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:8d:49:dc:11:ae:88:e5:87:9d:31:52:27:b4:8b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 12 12:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66689087e787990916878db20d555684c22cd9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:dc:e1:87:e0:df:66:06:3b:ba:94:ef:e5:
7e:84:3e:62:6b:df:9b:c6:28:6c:c9:65:21:cb:39:
ad:67:7d:76:c5:f2:e7:cb:6e:cb:5d:00:65:9c:24:
aa:00:f0:f0:89:84:d1:5b:cf:b6:f0:62:1a:e9:ab:
0a:31:67:51:63:86:1b:f2:f3:ba:6c:36:cf:d8:bd:
a9:72:3a:5f:cb:7e:9f:2e:8b:e2:f9:b1:90:a0:04:
d7:ed:e9:42:3f:1f:fd:6c:53:85:b4:21:5a:a8:e9:
d6:5c:c9:7d:5f:67:ee:32:e1:9c:fa:05:61:b8:28:
03:d7:1d:ab:f2:6e:16:e3:82:3d:50:68:6d:b7:2e:
54:0b:dd:b6:8b:4f:21:f4:b1:32:c4:91:5c:df:a4:
96:dc:e5:0a:f4:0b:1a:3a:81:07:33:78:ce:e5:dd:
c9:59:c4:5f:4f:65:cf:b8:60:83:34:bc:b5:37:c3:
2e:90:28:88:2c:eb:b1:e3:30:75:8a:5c:8c:fa:e4:
05:b4:f9:31:04:76:55:25:ca:e4:c4:52:ea:a5:b0:
e7:e2:90:f7:29:4f:30:07:95:02:da:b8:03:4a:08:
73:d0:73:db:44:fb:f0:9b:55:34:14:ec:c7:7f:23:
0d:85:c1:48:f6:dd:db:72:0b:9b:02:e0:5a:ce:51:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1d:c7:95:b2:ee:11:97:49:91:f7:95:85:84:3b:af:c8:85:
c5:4c:b5:3d:c7:14:09:09:2f:8d:55:59:a8:9e:98:af:e7:bb:
97:63:4e:47:1a:db:87:35:23:de:5e:b1:07:bd:dd:af:ff:96:
c1:d4:18:4e:d3:96:d5:bf:fb:92:bb:11:ea:e1:89:4b:3f:66:
75:28:b9:05:23:f1:16:d1:83:43:a6:51:26:c1:5e:18:df:fe:
e4:99:ad:ec:4d:e2:fe:07:af:6d:64:79:93:87:98:79:a2:26:
f7:63:f9:d8:6c:dd:0d:21:3c:38:60:b0:34:f2:4d:2a:e9:25:
37:44:d7:15:01:f4:b0:2f:f4:ca:74:59:fb:0b:53:ff:98:97:
d0:5c:b4:0b:fb:fa:e9:ea:be:6a:04:2a:9b:7b:c8:66:8e:4f:
c3:0e:8b:60:97:bc:37:d2:e6:f0:d1:55:8b:52:a3:0b:63:84:
23:ee:92:a2:4e:f4:56:57:89:f2:f8:b2:d1:7f:88:4a:93:74:
b0:0a:06:a6:0b:fb:99:76:46:55:a0:3c:ba:cd:36:8e:d0:f2:
07:c0:02:d8:38:b2:0e:8e:a5:7f:a6:17:e5:c7:4a:14:9a:6d:
ba:44:01:53:7b:66:58:2c:47:51:46:06:bc:f9:85:d4:cc:d4:
06:39:14:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:49:43 2024 by rpki-client on console-ams.rpki-client.org